Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E5335B002FF11EF8BAB7155017001B1.roa
File: 7E5335B002FF11EF8BAB7155017001B1.roa (raw, json)
Hash identifier: Ad6ilfHdW11HQ6JiYD1ZXo565pd83ssI6dXSKJWcc6M=
Subject key identifier: DD:EF:83:E6:C1:47:AD:D9:5E:0E:E5:AE:74:20:33:8A:D6:08:A5:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 853F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E5335B002FF11EF8BAB7155017001B1.roa
Signing time: Thu 25 Apr 2024 12:29:43 +0000
ROA not before: Thu 25 Apr 2024 12:29:40 +0000
ROA not after: Sat 04 May 2024 12:29:40 +0000
asID: 9009
IP address blocks: 156.246.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34111 (0x853f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 12:29:40 2024 GMT
Not After : May 4 12:29:40 2024 GMT
Subject: CN=662a4cb7-35e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c6:b1:af:fb:91:13:45:14:d8:65:c1:a8:55:
69:19:2a:c2:de:1c:d4:44:be:8f:08:d3:38:4b:26:
85:04:b2:e0:2c:6c:ae:d8:65:dd:a9:1d:26:16:8b:
30:71:36:9d:87:22:42:48:03:be:53:8e:1d:51:2b:
8f:bd:e0:46:08:7c:89:0c:20:58:44:1c:6c:29:d0:
6a:5a:51:ac:c5:06:b6:2b:32:dd:58:d0:c6:cd:2d:
67:3e:23:e2:df:b4:70:e1:c6:0b:1f:38:ff:79:f1:
18:76:5c:5e:1f:ee:c5:cc:0d:c7:50:22:99:33:c1:
f9:3b:5a:7c:fc:07:38:eb:10:b5:8e:3c:a6:38:3b:
a3:53:fd:18:34:32:da:5a:d2:63:38:24:50:7b:3d:
09:ab:03:ff:be:b7:23:fa:53:71:15:66:08:72:26:
6f:1e:41:9c:b0:1e:d7:35:5b:65:e1:8b:c5:23:2d:
70:2a:c1:65:4a:3a:d2:36:1a:66:46:33:12:d5:f2:
3e:fd:e6:2e:e0:98:32:39:c3:57:dc:3a:40:f5:84:
0a:e9:fd:a5:e4:6a:01:ec:83:84:8e:51:11:7d:94:
00:24:a1:2b:64:83:80:41:5d:9f:cd:0e:58:02:ab:
9b:e5:c9:d6:95:5a:bb:bc:d9:88:b6:74:c0:81:4a:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EF:83:E6:C1:47:AD:D9:5E:0E:E5:AE:74:20:33:8A:D6:08:A5:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E5335B002FF11EF8BAB7155017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ae:22:bf:e6:9f:a7:86:e4:b6:30:c9:91:4a:3f:5b:59:d0:0d:
fe:f3:bb:0c:cd:ff:51:74:2c:fa:f8:68:96:96:d2:ba:76:88:
7a:45:68:14:84:39:04:fa:67:6d:81:7b:28:ea:46:30:9f:fb:
48:a7:60:48:26:6b:87:5f:5e:46:30:75:95:b3:fd:9e:62:69:
a2:2e:dd:fc:be:91:dc:33:0a:12:98:d6:43:c2:01:9a:68:77:
b8:2f:c0:74:cc:d4:65:d2:21:ce:eb:c2:ca:6e:4f:f3:c8:1c:
ec:6c:ef:b8:73:d9:03:fb:2f:82:96:e4:ca:e0:3d:8c:95:c5:
25:b1:ff:2e:91:38:ea:c2:24:bc:ab:28:02:93:de:4a:cc:0a:
f9:4a:ef:ca:80:b4:c6:08:00:bb:23:ed:5a:2d:71:5d:4e:51:
16:63:a3:60:e2:29:95:85:cc:7c:39:39:93:d0:10:f5:e8:b0:
75:71:59:2a:fd:8c:13:72:4d:a6:40:15:5c:b2:5d:3b:fb:44:
d8:cd:44:3b:9d:1e:2d:b1:59:7b:69:b3:bd:9a:0e:5b:f7:3e:
b8:93:2d:fb:0c:a4:a5:b7:3a:7d:81:4b:d2:4f:42:97:7f:1b:
f0:36:1b:da:c8:3b:94:b3:a9:8b:5c:f5:a9:35:23:f4:9c:c1:
63:73:7d:9d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIU/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI1MTIyOTQwWhcNMjQwNTA0MTIyOTQwWjAYMRYw
FAYDVQQDEw02NjJhNGNiNy0zNWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2saxr/uRE0UU2GXBqFVpGSrC3hzURL6PCNM4SyaFBLLgLGyu2GXdqR0m
FoswcTadhyJCSAO+U44dUSuPveBGCHyJDCBYRBxsKdBqWlGsxQa2KzLdWNDGzS1n
PiPi37Rw4cYLHzj/efEYdlxeH+7FzA3HUCKZM8H5O1p8/Ac46xC1jjymODujU/0Y
NDLaWtJjOCRQez0JqwP/vrcj+lNxFWYIciZvHkGcsB7XNVtl4YvFIy1wKsFlSjrS
NhpmRjMS1fI+/eYu4JgyOcNX3DpA9YQK6f2l5GoB7IOEjlERfZQAJKErZIOAQV2f
zQ5YAqub5cnWlVq7vNmItnTAgUrciwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN3v
g+bBR63ZXg7lrnQgM4rWCKViMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RTUzMzVCMDAyRkYxMUVGOEJBQjcxNTUwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnPYgMA0GCSqGSIb3DQEBCwUA
A4IBAQCuIr/mn6eG5LYwyZFKP1tZ0A3+87sMzf9RdCz6+GiWltK6doh6RWgUhDkE
+mdtgXso6kYwn/tIp2BIJmuHX15GMHWVs/2eYmmiLt38vpHcMwoSmNZDwgGaaHe4
L8B0zNRl0iHO68LKbk/zyBzsbO+4c9kD+y+CluTK4D2MlcUlsf8ukTjqwiS8qygC
k95KzAr5Su/KgLTGCAC7I+1aLXFdTlEWY6Ng4imVhcx8OTmT0BD16LB1cVkq/YwT
ck2mQBVcsl07+0TYzUQ7nR4tsVl7abO9mg5b9z64ky37DKSltzp9gUvST0KXfxvw
NhvayDuUs6mLXPWpNSP0nMFjc32d
-----END CERTIFICATE-----
Generated at Sun May 5 03:07:07 2024 by rpki-client on console-fra.rpki-client.org